CVE-2026-79534

Name of the Vulnerable Software and Affected Versions mark3labs mcp-filesystem-server version 0.11.1

Description An improper link resolution in the validatePath() function (filesystemserver/handler/helper.go) allows for directory traversal. When filepath.EvalSymlinks returns os.IsNotExist for a dangling symlink (a symbolic link pointing to a non-existent file or directory), the fallback mechanism validates only the parent directory and returns the unresolved path. Consequently, the write file, modify file, copy file, move file, and create directory functions may follow a pre-existing dangling symlink within an allowed directory to create or modify files outside the configured allowed directories.

Recommendations Update mark3labs mcp-filesystem-server version 0.11.1 to a newer version that resolves the improper link resolution in the validatePath() function.